mediawiki/auth-remoteuser

Release historycaution

The latest registry release was published nearly seven years ago, with no releases in the last 12 months. This creates meaningful version-staleness risk even though the package has a stable release history.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance activity concentrated. Wikimedia organization backing provides some handoff capacity but does not remove the current concentration concern.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing recent activity despite the old registry release. Activity is limited, so it does not fully offset release staleness.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tools were detected. The small package and organization backing partly reduce the significance of this tooling gap.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities. This is a hygiene concern rather than evidence of an unsafe release.